138 matches found
TYPO3-HTML-Sanitizer-XSS-CVE-2023-47125
Stored XSS exploit in TYPO3 HTML Sanitizer CVE-2023-47125 Description DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. Vuln versions = 1.0.0, = 2.0.0,...
CVE-2026-42611: Improper Neutralization of Input During Web Page Generation
Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged with the ability to create a page user can cause XSS with the injection of svg element. The XSS can further be escalated to dump the entire system information available under /admin/config/info whenever a Super Admin visit...
CVE-2018-19048
Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element...
EUVD-2010-1267
Malware in sbrugna...
EUVD-2019-0460
Malware in sbrugna...
EUVD-2018-11591
Malware in sbrugna...
EUVD-2018-0751
Malware in sbrugna...
EUVD-2009-2464
Malware in sbrugna...
EUVD-2011-2352
Malware in sbrugna...
EUVD-2011-2358
Malware in sbrugna...
EUVD-2019-0741
Malware in sbrugna...
EUVD-2020-0615
Malware in sbrugna...
EUVD-2017-15874
Malware in sbrugna...
EUVD-2022-2438
Malicious code in bioql PyPI...
EUVD-2022-5607
Malicious code in bioql PyPI...
EUVD-2022-32736
Malicious code in bioql PyPI...
EUVD-2022-5827
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2020-4054
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Sanitize RubyGem sanitize greater than or equal to 3.0.0 and less than 5.2.1, there is a cross-site scripting vulnerability. When HTML is sanitized using...
CVE-2025-2336 AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'
Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...
CVE-2025-2336 AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'
Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...